blackmoon | 7b02ffc736f2f974dec5d8271d908a21dd1cf43762a23222b17e2f0206eb099a

General

Target

7b02ffc736f2f974dec5d8271d908a21dd1cf43762a23222b17e2f0206eb099a
Size

9.2MB
MD5

26c7269acffe5bb6fc6a4330b1b9b9d9
SHA1

5d4d3d7a2821f69a91f7d9ede7ab053d9a3a461c
SHA256

7b02ffc736f2f974dec5d8271d908a21dd1cf43762a23222b17e2f0206eb099a
SHA512

f1439dadf48f09f12edf4c79f46f95d765b979d1dd2be692fbb87d8ada4cec1ef1c5e06c16ce6398476474d925dde575c15a688e65eade1509269175fa049820
SSDEEP

98304:TRoeO6XTBJYazImknGzZr+HIPFtmOZ9G17xwFB5URUSKnaSOdroSCa:NoeO6XTYxmknGzwHIPHd9swFBubKT

Score

10^/10

Detect Blackmoon payload 1 IoCs

Processes:

resource	yara_rule
sample	family_blackmoon

mimikatz is an open source tool to dump credentials on Windows 1 IoCs

Processes:

resource	yara_rule
sample	mimikatz

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
7b02ffc736f2f974dec5d8271d908a21dd1cf43762a23222b17e2f0206eb099a

NSIS installer 1 IoCs

installer

Processes:

resource	yara_rule
sample	nsis_installer_2